[Verse 1] When Canada meets the U.S. defense supply chain DFARS clauses flow down like drops of rain From prime contractors to subs across the border Every requirement needs to be in order Two-fifty-four dash seven-oh-four appears In contracts that cross our frontiers Cybersecurity standards can't be ignored When you're supporting the Pentagon's sword [Chorus] DFARS flows down, SPRS scores up Canadian subs need to fill their cup Cross-border data needs careful scoping ITAR and EAR keep lawyers hoping Cloud solutions north of forty-nine Must match GCC-High's security line Two nations, one mission, compliance aligned Defence industrial readiness refined [Verse 2] SPRS registration for the northern crew Non-U.S. entities need their breakthrough Upload your POA&M to the federal site Self-assess your score and get it right One-ten is the magic number to achieve Without it, contracts you won't receive Basic, Moderate, High - pick your NIST lane Document controls to prove you're not in vain [Chorus] DFARS flows down, SPRS scores up Canadian subs need to fill their cup Cross-border data needs careful scoping ITAR and EAR keep lawyers hoping Cloud solutions north of forty-nine Must match GCC-High's security line Two nations, one mission, compliance aligned Defence industrial readiness refined [Bridge] CUI crossing borders brings complexity ITAR technical data, no simplicity Export Administration Regulations too Know your categories, know what you can do Microsoft GCC-High south of the line Canadian equivalents must be just as fine Sovereign cloud with equivalent control Cross-border compliance is the ultimate goal [Verse 3] When technical data flows from south to north License requirements must be set forth Dual-use technology under EAR's domain Canadian cloud providers feel the strain Azure Government in the States stands tall Canadian equivalents must answer the call Protected B and Secret classifications Require specialized cloud implementations [Chorus] DFARS flows down, SPRS scores up Canadian subs need to fill their cup Cross-border data needs careful scoping ITAR and EAR keep lawyers hoping Cloud solutions north of forty-nine Must match GCC-High's security line Two nations, one mission, compliance aligned Defence industrial readiness refined [Outro] From Ottawa to Washington the standards flow CMMC readiness helps our partnership grow Canadian industry rising to the call Defence industrial base standing strong and tall
← 1 CMMC Current State | 3 Building the Dual-Market Offering →